fox :: echo/RzkSItcrulissiiuliss

Meta Discussed 'Whisper Strategy' to Discredit Social Media Critic Jonathan Haidt, Files Show

robot — 2026-11-01 16:22:01

robot -> All

The Guardian reports:
Meta staff discussed deploying a "whisper strategy" to undermine the influential US academic whose work has inspired a global social media crackdown, according to court documents. Employees at the parent group of Facebook and Instagram sought to discredit Jonathan Haidt, the social psychologist and author of The Anxious Generation, a book that helped tip the debate about online safety towards more stringent measures such as the under-16 ban in Australia.

Minutes of internal meetings contained in a recent legal filing in the US showed that staff discussed how to "get the academic community to disavow Haidt". They appear in a document titled "Well-being Meeting Sound-check Notes", which refers to discussions of how Meta could "turn other academics against Haidt" and to a "whisper strategy" aimed at achieving that goal. It also mentions "debunking" his work. Minutes from a meeting on 8 March 2023 mention "Curtiss", an apparent reference to Meta's then vice-president of research, Curtiss Cobb. It states: "Curtiss's goal for this work: how do we get the academic community to disavow Haidt. Can't co-opt them, so how do we enrage them ... so the media finds him not credible."

It then adds: "Not thinking about this as a loud strategy. A below-the-line campaign...."

The minutes were produced before Haidt published his book in 2024 and discuss responding to a Substack post written by the academic in which he reviews "a bunch of articles".

"It is not clear whether Meta acted on the ideas outlined in the minutes."

[ Read more of this story ]( https://tech.slashdot.org/story/26/10/31/0559203/meta-discussed-whisper-strategy-to-discredit-social-media-critic-jonathan-haidt-files-show?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Проект GNOME внедрил новый процесс принятия решений на основе RFC

robot — 2026-11-01 13:44:02

robot -> All

Разработчики GNOME утвердили новый процесс принятия решений, основанный публикации предложений в форме RFC (Request for Comments) и их последующего совместного утверждения. RFC-модель вводит жёсткий регламент для повышения прозрачности, структурирования процесса и перехода к коллективной ответственности за решение вместо личной. Модель на основе RFC будут применять для выхода из тупиковых ситуаций, в которых не удаётся добиться консенсуса, для утверждения архитектурных изменений и крупных переработок интерфейса, а также для утверждения глобальных изменений в проекте, затрагивающих методы работы участников или код разных приложений и подсистем.

https://www.opennet.ru/opennews/art.shtml?num=66590

В конфигурационных файлах curl случайно реализована полнота по Тьюрингу

robot — 2026-11-01 13:44:02

robot -> All

Выявлена возможность создания любых вычислимых функций при помощи конструкций в файлах конфигурации утилиты Curl. Данная особенность проявляется только в версиях Сurl с 8.12-8.16 и вызвана непреднамеренной реализацией полноты по Тьюрингу, позволяющей создавать машины Тьюринга, используя возможность извлекать байтовые диапазоны из значений переменных и неограниченную глубину вложенности при подключении внешних конфигурационных файлов.

https://www.opennet.ru/opennews/art.shtml?num=66589

America's Clocks Are Still Falling Back Tonight Despite Trump's Daylight Saving Push

robot — 2026-11-01 12:22:01

robot -> All

Clocks "fall back" one hour tonight to end Daylight Saving Time — though many Americans want to end the twice-yearly clock change, reports Axios.

But the U.S. Congress "remains deadlocked about how to make that happen."

The clocks are falling back despite a bipartisan House vote in July to make daylight saving time permanent and Trump's subsequent push for Senate action... While most Americans want to end the twice-yearly clock changes, they don't necessarily favor Trump's solution. Gallup found 48% of Americans support permanent standard time the entire year, compared with 24% who prefer permanent daylight saving time, as Trump wants... In 1974, the U.S. experimented with year-round daylight saving time but reversed course amid concerns about children going to school in the dark>.

Experts still debate whether permanent DST is good for people. Supporters argue that permanent daylight saving time would provide more afternoon and evening sunlight, encouraging outdoor activities. But sleep experts warn that darker mornings and lighter evenings can disrupt sleep cycles, while permanent daylight saving time could force millions of children to travel to school in the dark. The bottom line: The American Academy of Sleep Medicine says it prefers permanent standard time because it better aligns with natural sleep cycles.

"Hawaii and most of Arizona don't observe daylight saving time, so their clocks won't change," the article points out, adding that eliminating it for the rest of America "still faces opposition in the Senate and isn't expected to be considered by the end of the year.

But "the upcoming midterms could change the balance of power in Congress, potentially shifting the debate."

[ Read more of this story ]( https://yro.slashdot.org/story/26/10/31/2356208/americas-clocks-are-still-falling-back-tonight-despite-trumps-daylight-saving-push?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Re: Я правильно понимаю же?

shaos — 2026-11-01 12:02:37

shaos -> ake

ake перестал меня опрашивать с 28 октября...

Атака на GitLab-сервер проекта Alpine Linux

robot — 2026-11-01 11:44:03

robot -> All

Разработчики дистрибутива Alpine Linux раскрыли информацию о попытках взлома платформы совместной разработки gitlab.alpinelinux.org, на которой велась работа над пакетным менеджером APK, сборочными инструментами, компонентами инфраструктуры и сценариями сборки пакетов (aports). Атака была совершена через эксплуатацию уязвимости в платформе GitLab, вызванной целочисленным переполнением в движке регулярных выражений языка Ruby. Доказательств и следов успешного взлома найти не удалось, но так как полностью исключить успешную эксплуатацию уязвимости не представляется возможным, контейнер с GitLab был признан потенциально скомпрометированным и его содержимое полностью перестроено с нуля, а у пользователей инициирована процедура смены паролей.

https://www.opennet.ru/opennews/art.shtml?num=66587

STATS 2026-10-31

root — 2026-11-01 11:11:01

root -> All

TOP20 VISITORS:

[1] AhrefsBot point=0 web=1391 up=41.6MB (55%)
[2] PetalBot point=6 web=1330 up=8.2MB (10%) <--- PetalBot
[3] 216.244.66.x point=0 web=131 up=5.6MB (7%)
[4] 16.216.88.x point=0 web=415 up=3.7MB (4%)
[5] Amazon point=0 web=57 up=1.7MB (2%)
[6] 111.189.171.x point=0 web=3 up=1.6MB (2%)
[7] 217.114.158.x point=25 web=0 up=1.3MB (1%) <--- fox (1/hr)
[8] 171.3.52.x point=0 web=3 up=1.1MB (1%)
[9] TikTok point=0 web=49 up=0.9MB (1%)
[10] 157.70.168.x point=0 web=3 up=0.7MB (<1%)
[11] 81.167.26.x point=0 web=6 up=0.4MB (<1%)
[12] 153.176.137.x point=0 web=3 up=0.4MB (<1%)
[13] 54.37.252.x point=0 web=6 up=0.3MB (<1%)
[14] 217.178.204.x point=0 web=2 up=0.3MB (<1%)
[15] 193.70.34.x point=0 web=5 up=0.3MB (<1%)
[16] 47.79.13.x point=0 web=29 up=0.2MB (<1%)
[17] Google point=0 web=21 up=0.2MB (<1%)
[18] 220.181.108.x point=0 web=23 up=0.2MB (<1%)
[19] 116.179.37.x point=0 web=34 up=0.2MB (<1%)
[20] 192.3.149.x point=0 web=14 up=0.1MB (<1%)

TOTAL TRAFFIC: 75MB

ii stat for October 2026

shaos — 2026-11-01 11:44:23

shaos -> All

Echoareas
────────────────────────
bot.slashdot.........315 ██████████████████████████████████████████████████▒▒▒▒▒▒
lor.opennet..........190 ██████████████████████████████████████████████████▒▒▒
spnet.stats...........30 ██████████████████████████████
ii.stat................1 █
────────────────────────
Total                536

Xbox Manager: AI Already Being Used In Xbox Game Development - And Throughout the Game Industry

robot — 2026-11-01 09:22:01

robot -> All

Should generative AI be used for videogame development? Brandon Stirrup, a strategy manager at Xbox, claims Xbox is already using AI, reports Engadget. And he also says that those who say they aren't are merely "pretending."

Stirrup deactivated his social media account shortly after (though his posts have been archived elsewhere), igniting conversations about what role generative AI actually has or should have in game development. In some ways, it would be unsurprising to learn that Xbox is using AI to the extent that Stirrup implies. Xbox recently announced the formation of Xbox Labs at least in part as a response to a rising trend of AI-coded game ports; the announcement heavily implied that the new team would use AI as well but didn't say it outright. Xbox owner Microsoft is also a major player in AI development... Developers including Capcom, Square Enix, Sega, Nexon and Activision have all either used AI in their games or pledged to do so. Fortnite developer Epic Games has been particularly up-front about its AI use, and CEO Tim Sweeney has aggressively promoted it on social media...

On the other hand, there are large pockets of the game industry vocally opposed to generative AI. Notably, these tend to be smaller, independent studios without shareholders to impress by touting the cost-savings of AI. These studios include Tunic publisher Finji, Stardew Valley developer ConcernedApe and Clickolding developer Strange Scaffold, among many more. Due to the sheer number and variety of game studios, it's impossible to say just how much of the industry actually uses AI at this point, but claims that "everyone" is using it are clearly false.

There's a similar divide among players about whether generative AI should be embraced or avoided at all costs. While some simply accept AI as part of games going forward, others have pledged to avoid games that use the technology outright due to its environmental costs, labor issues or pure aesthetic preference. That's led to the popularity of tools like a browser extension that makes Steam's AI disclosures more visible and grassroots efforts by developers to implement labels certifying their games as AI-free... Many players and developers alike justify the use of AI in generating code, even if they're opposed to it in other areas.

"Gaming is the only industry slow-walking the transition," Xbox's Stirrup allegedly said, "because users have negative sentiment. Everyone else accepts reality."

"Gaming is the only industry pretending to not use AI."

[ Read more of this story ]( https://games.slashdot.org/story/26/11/01/0431200/xbox-manager-ai-already-being-used-in-xbox-game-development---and-throughout-the-game-industry?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Binance Replenishes 90% of Stolen $6.3B, Pledges They'll Cover It All, Reopen Sunday

robot — 2026-11-01 06:22:01

robot -> All

"We've now replenished 90% of the stolen assets, and we're committed to covering the remaining 10%," Binance co-CEO Richard Teng posted on X, adding that "Our users will not bear the financial impact of this incident."

"Binance said it was able to replace the funds taken in the record hack by using company money to buy new tokens," reports NBC News:

The remaining 10% consists of tokens that are less liquid, meaning they may take longer to buy, it said in a statement posted on X... Binance said it has set aside around $6.34 billion of company funds internally to cover the losses. The money spent re-buying tokens came from using part of its $1 billion Secure Asset Fund for Users, a bitcoin reserve it holds to protect customers in the event of security breaches, as well as some of its Futures Insurance Fund, and the company's own corporate treasury, it said on X.

NBC News reports that the FBI blames the breach on a North Korea-sponsored group known as TraderTraitor:

Members of [TraderTraitor] were observed by law enforcement converting stolen assets into the cryptocurrency ethereum, the FBI said in a statement, adding that it expects "further laundering" of the assets through the use of related technology... After the hack, the exchange stopped allowing customers to withdraw their funds, but it said Saturday it was still on track to reopen withdrawals Sunday.

CNBC reports:

The world's largest crypto exchange initially said the hack may involve "a compromised DevOps engineer's laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions." However, Co-CEO Richard Teng later said the attack involved a more complex process rather than the misuse of a single engineer's permissions.

The New York Times describes what happened when Binance first spotted "a multibillion-dollar deluge of digital coins" pouring out of its accounts:

As the news spread, Binance's top executives put together an informal war room on Wea, the company's internal messaging system, with about 100 participants, including specialized cryptocurrency tracers and security personnel. They eventually transitioned to a mass conference call, with 100 boxes on the screen, where employees took turns muting and then unmuting, communicating in a mixture of English and Chinese. Among them was He Yi, Binance's co-chief executive, who is seven months pregnant, and worked through the night from her base in Abu Dhabi, taking a call at 3 a.m. local time....

Much of the drama played out in public. Almost all crypto transactions are recorded on the blockchain, a ledger of money movements that anyone can look up. That meant crypto analysts could see funds leaving Binance in real time... North Koreans have targeted crypto companies for years, using the proceeds of those thefts to fund its nuclear program, according to Western officials. The hackers have developed increasingly complex strategies to steal crypto and launder the proceeds, a painstaking endeavor that can take months to complete. In a blog post on Friday, Chainalysis said the attackers had deployed "laundering patterns we have not seen before," conducting thousands of transactions over a short period, probably with the help of automation.

At the same time, Binance's colleagues in the industry mobilized to intercept some of the laundered crypto. Certain digital coin issuers can freeze funds, allowing them to halt a money-laundering operation in its tracks. Soon after the hack, Tether and Circle, two major issuers, announced that they had frozen stashes of their own coins that the hackers had seized from Binance, a combined total of more than $2 billion in crypto. Binance is now working to gain access to those funds, the company said. But $2.4 billion in crypto is already "beyond any issuer's reach," according to [blockchain intelligence firmm] TRM.

The article also includes President Trump's reaction when asked Friday about the breach. "I've always felt it was a little bit dangerous. But they say they have it pretty much under control. We'll see."

[ Read more of this story ]( https://news.slashdot.org/story/26/11/01/0129237/binance-replenishes-90-of-stolen-63b-pledges-theyll-cover-it-all-reopen-sunday?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Computer Simulations Suggest Building Blocks of Life Didn't Arrive on Prehistoric Comets

robot — 2026-11-01 02:22:01

robot -> All

CNN reports:

The popular theory that comets were crucial in kick-starting life on Earth billions of years ago may not hold up, according to new computer simulations that counter decades of scientific thinking. The finding suggests the fragile organic molecules supposedly carried by the icy objects would have been destroyed on impact, upending an established origin of life theory that dates back to at least 1961 [with earlier versions postulated in 1908]...

Early in its history — over 4 billion years ago — Earth may have experienced a period of heavy bombardment from more than 100,000 comets larger than 100 meters (328 feet), according to the new study, published Wednesday in the journal Scientific Reports. Those impacts, however, were mostly too heavy for life-starting molecules to withstand. The team used the latest models of comet formation and evolution to simulate this early planetary period 100,000 times. "Given what we know about surface environments on the early Earth, on average, our simulations found that there were no successful impacts," said lead study author Richard Anslow, who conducted the research while completing his doctorate at the Institute of Astronomy of the University of Cambridge in the United Kingdom... "The typical velocities of these comets when they impact the Earth meant that actually very few, if any, would have been able to deliver intact organic molecules, so comets actually don't seem to be as useful for prebiotic chemistry as was previously thought," Anslow said.

More precisely, 54% of the simulations showed no impact at all, while the remaining 46% had at least one and a "tiny minority" returned up to three collisions, Anslow said. "We can't rule out confidently that there was never a successful impact — there could have been one of these fluke impacts." However, such flukes had to occur in a "perfect location" that already met several important conditions, including the presence of liquid water and other chemicals needed to support life. That combination makes the overall process unlikely, he added.
The article notes his argument that even if a successful impact occurred, it's unlikely an important chemical like hydrogen cyanide (HCN) could survive the impact, and would've dissolved in an ocean impact. Plus, "many other precursor molecules are also needed, such as compounds that contain phosphorus and sulfur, but these are not routinely found in comets, Anslow said."

An alternative cosmic source of organic material could have been asteroids, which typically struck Earth more slowly and in greater numbers. Anslow pointed to recent findings on samples from asteroids Bennu and Ryugu, which contain the majority of protein-building amino acids. The recent study also raises another intriguing possibility: While Earth may not have had the ideal conditions to foster HCN from comet impacts, ancient Mars might have been better suited. "Because Mars is much smaller than Earth and further away from the sun, the typical impact velocity of comets is much lower, so while these impacts on Earth were destroying most of the HCN, this wasn't the case so much for Mars," Anslow said. This idea could add another dimension to the long-standing question of whether the red planet once supported life.

While the authors closely analyzed how HCN could have survived comet impact, the chemical may have undergone reactions before the icy bodies entered Earth's atmosphere, said Queenie Chan, an associate professor of Earth sciences at Royal Holloway University of London, who was not involved with the study. This process could have created biologically important compounds, such as those protein building blocks, that are less volatile and more likely to survive.

[ Read more of this story ]( https://science.slashdot.org/story/26/10/31/2142240/computer-simulations-suggest-building-blocks-of-life-didnt-arrive-on-prehistoric-comets?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Recycling ANSI Art: Tracing the Origins of BBS Logon Screens

robot — 2026-11-01 01:22:02

robot -> All

BBS-era "door" games are preserved by the site Break Into Chat, along with their history. Now the site's actually traced the origins of several ANSI art screens in the 1980s and "how different people later transformed the original images," starting from one of the most popular bulletin board systems in St. Louis, Missouri.

Slashdot reader Kirkman14 writes:

"Fire Escape" was curator of the authoritative list of bulletin board systems in St. Louis's area code and sysop of the area's most popular board. Like many sysops of that time, Fire Escape enlivened her bulletin board by finding and repurposing older ANSI art. Eventually her BBS had 18 different logon screens in its rotation, many of which featured flames or mushroom clouds or made liberal use of red and yellow.

Break Into Chat follows the trail:

Some, maybe even most, of Fire Escape's logon screens had actually been adapted from old school "public domain" ANSI art drawn in the late 1980s and early 1990s by folks such as Michael C. Ling, Lora Ruffner (aka "Ebony Eyes") and Violet Stymacks.... Stymacks was unusually generous with her ANSI art. When she first began drawing, she combed through Fidonet node lists looking for bulletin boards with interesting or inspiring names. When she found one, she would draw an ANSI screen that fit the board's theme, then send it to the sysop. Eventually, sysops began seeking her out, too. By late 1990, she claimed that 500 bulletin boards were using her screens. Three years later, that total had tripled, according to Boardwatch . I believe it — I have located more than 1,100 of her pieces so far. She was so prolific that it would be surprising if she hadn't reused or remixed her own work over the years...

[D]id they intend for other people to do so? Or would they have considered such borrowing or adapting as "ripping" or just plain "stealing"? These questions have dogged the BBS, ASCII art, and ANSI art scenes from the beginning. A freelance writer named Patrick Grote grappled with this ethical dilemma in 1990. He had begun to publish archives of ANSI art that he had collected from various public messageboards and networks. But what were people allowed to do with the ANSI screens in these collections? Was it okay to modify them? "Tough call," Grote said. "I know some people copyright their screens by inserting a little '(C)' on it," Grote wrote in a README file included in these collections. "Is this 'true' copyrighting? I would say yes, but then again, I don't feel like having any legal action taken against me for using an ANSI screen. In my opinion, I would say leave the ones that say '(C)' alone, but make every effort to contact the artist and ask for permission...."

When I corresponded with Fire Escape this year, she admitted her memory wasn't what it used to be, but felt certain that she had not asked any artists for permission because she didn't know who they were or how to reach them. "I figured if anyone had an issue, I'd just remove the screen," she said.
"But no one ever said anything about it."

[ Read more of this story ]( https://games.slashdot.org/story/26/10/31/2038237/recycling-ansi-art-tracing-the-origins-of-bbs-logon-screens?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

French Lawmakers Back Per-Gigabyte Internet Traffic Tax

robot — 2026-11-01 00:22:01

robot -> All

Companies like Google, Netflix, TikTok, and Meta may soon owe the French government, reports Tom's Hardware:

France has approved a proposed tax that aims to tax the amount of internet data per gigabyte sent to French users in the country... According to minutes released by the National Assembly, members voted 11-10 in support of the motion on October 30 — which now means the new law has been added to the country's next budget, despite major opposition from the government side and the finance committee rapporteur. The latest amendment, introduced by socialist lawmaker Laurent Lhardit, could see content providers pay €0.055 (roughly $0.06) to the government for every gigabyte of content distributed to French users. With approximately 154 million users and counting in France, the proposal's authors say such a tax could generate around €10 billion ($11.2 billion) in annual revenue for the government.

The said proposal, though yet to be passed as it must survive further parliamentary scrutiny, aims at companies that generate substantial internet traffic as opposed to taxing their advertising revenue, profits and subscriptions. Its explanatory notes particularly mention Google, Meta, Netflix, Amazon, and content delivery network Akamai as major potential contributors. Notably, TikTok and other similar platforms could fall under this broader scope depending on how these rules are applied. Internet service providers, including Orange Free and Liad, would be required to measure the volume of data and identify the companies responsible for sending it to French users. The Data will then be collected and submitted quarterly to France's tax administration under the supervision of telecommunications watchdog Arcep.

The measure becomes law if it clears the remaining stages of France's budget process, the article points out, "with parliament scheduled to vote on the budget's first section in early November."

"VideoLAN, the French nonprofit organization behind the VLC media player, warned that the proposed levy could cost it more than €1 million annually," reports CircleID. "Its response illustrates how traffic-based taxation could affect organizations distributing large volumes of data without corresponding commercial revenue."

[ Read more of this story ]( https://tech.slashdot.org/story/26/10/31/1857243/french-lawmakers-back-per-gigabyte-internet-traffic-tax?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Эксплуатируемая через SMS уязвимость в Android, приводящая к зацикленной перезагрузке

robot — 2026-11-01 00:44:03

robot -> All

Раскрыты детали и опубликован эксплоит для уязвимости (CVE-2026-58882) в платформе Android, позволяющей добиться зацикленной перезагрузки через отправку специально оформленного SMS-сообщения. Для устранения зацикленной перезагрузки требуется сброс к заводским настройкам или ручные манипуляции при помощи утилиты ADB. Уязвимость получила кодовое имя "SMS of Death" и устранена в октябрьском обновлении платформы. Атака может быть совершена на любые телефоны, оснащённые Android 12-17. Обновление выпущено только для Android 14-17. Эксплуатирующее уязвимость SMS-сообщение обрабатывается как фоновое и не отображается на устройстве.

https://www.opennet.ru/opennews/art.shtml?num=66586

DroidDeck 0.6.7

robot — 2026-10-31 23:44:04

robot -> All

https://www.linux.org.ru/images/24238/1000px.jpg
Тихо и незаметно состоялся новый релиз DroidDeck --- приложения для запуска SteamOS поверх Android.

Заявленная цель проекта - полноценный SteamDeck-экспириенс для широкого круга устройств на платформе Android, локально, без рекламы и телеметрии, с открытым исходным кодом. Среди основных компонентов приложения:

• ARM64-сборка SteamOS, включающая Steam Big Picture и окружение рабочего стола KDE 6

• Gamescope в качестве композитора

• FEX-emu в качестве транслятора x86 в ARM

• Драйверы Mesa Turnip и Zink для аппаратного ускорения графики

• Proton для обеспечения совместимости с Windows

• Интерфейс для менеджмента и обновления компонентов, мониторинга производительности, настройки экранного или реального геймпада, опциональной интеграции библиотек игр сторонних магазинов и других вспомогательных функций

В этом релизе:

• Единый интерфейс библиотеки игр из всех подключнных источников

• Поддержка в Steam регуляторов яркости экрана, громкости звука и меню быстрого доступа на портативных Android-приставках

• Режим сна

• Поддержка стриминга с Xbox Cloud Gaming

• В список сторонних магазинов добавлен Battle.net

• Переработано окружение рабочего стола, теперь оно основано на Kubuntu 26.04 LTS. По умолчанию добавлен проброс директорий с файловой системы Android

• Поддержка второго экрана на двухэкранных устройствах

• Новый интерфейс мониторинга производительности

• Поддержка портретного режима на смартфонах и планшетах

• Улучшена производительность, снижено энергопотребление

Проект активно развивается и уже позволяет запускать многие современные игры для ПК на мобильных устройствах с достойной производительностью. Наличие root прав на устройстве не требуется.

https://www.linux.org.ru/news/games/18411051

Anthropic раскрыла критическую уязвимость в ядре Linux с root-эксплоитом

robot — 2026-10-31 23:44:04

robot -> All

Компания Anthropic раскрыла критическую уязвимость (CVE-2026-98432) в TCP-стеке ядра Linux, обнаруженную с помощью своей невыпущенной исследовательской модели Claude. Она позволяет удалённо выполнить код через отправку специально оформленных пакетов. Anthropic заявила, что создала рабочий эксплоит, который даёт возможность выполнить код на уровне ядра и удалённо получить права root. Эксплоит атакует системы с серверными процессами, принимающими соединения через сетевые сокеты с поддержкой протокола MPTCP (Multipath TCP). Поддержка MPTCP может быть активирована для отдельных сокетов — по умолчанию это делает стандартная библиотека языка Go, начиная с версии Go 1.24 (февраль 2025 года). Сама уязвимость не ограничивается MPTCP — этот протокол был выбран для демонстрации удалённой атаки.

( [ читать дальше... ]( https://www.linux.org.ru/news/security/18411589#cut ) )

Вышли VibePM-0.3.0 и CrazyCPM-1.0.1

robot — 2026-10-31 23:44:04

robot -> All

https://www.linux.org.ru/images/24243/1000px.jpg
Вышли новые версии прототипа системы управления проектами VibePM-0.3.0 и расчётного ядра CrazyCPM-1.0.1.

Теперь VibePM представляет собой полностью функциональный прототип системы управления проектами, который позволяет сопровождать проекты на всех стадиях их жизненного цикла, а так же строить сетевые модели проектов и работ.

Изменения в VibePM

( [ читать дальше... ]( https://www.linux.org.ru/news/opensource/18411822#cut ) )

Изменения в CrazyCPM

( [ читать дальше... ]( https://www.linux.org.ru/news/opensource/18411822#cut-1 ) )

Выход стабильной ветки CrazyCPM стал возможен благодаря тому, что все возможности библиотеки были реализованы в VibePM.

Что касается последней, то теперь у пользователей есть возможность выполнять проекты и наблюдать на графике, как красные линии неминуемо превращаются в коричневые.

Репозитории

• [ CrazyCPM на GitHub ]( https://github.com/shkolnick-kun/crazy_cpm )

• [ CrazyCPM на PyPi ]( https://pypi.org/project/crazy-cpm/ )

• [ VibePM на GitFlic ]( https://gitflic.ru/project/shkolnick-kun/vibe_pm )

NASA Seeks Proposals for Reboosting the Hubble Space Telescope

robot — 2026-10-31 23:22:02

robot -> All

The Hubble Space Telescope "will plunge back into the atmosphere in the early-to-mid-2030s," reports Ars Technica.

So now NASA has released a Request For Information (RFI) "asking commercial companies for ideas on how to reboost, service, or a controlled disposal of Hubble."

Specifically, NASA is looking for information about companies' current and near-term capabilities for capturing Hubble and boosting it to an altitude of at least 373 miles (600 km), enhancing the telescope's performance, or guiding Hubble to a controlled reentry. "The requirement includes that the boost and/or servicing mission must not harm the HST and that this mission is expected to occur by 2032," NASA wrote in the RFI. The contractor would be responsible for providing the launch vehicle, servicing spacecraft, mission operations, and "crew if applicable."
NASA is not committing to buying a Hubble rescue mission, but officials want to know who might be interested in mounting such a mission, how much it would cost, and which companies would have a realistic shot at reaching Hubble before it falls out of orbit and burns up on reentry. Orbital dynamicists currently predict that it will likely happen in 2033 or 2034 without intervention, but reentry forecasts can change based on solar activity... A reboost to NASA's requirement of 373 miles (600 km) would likely keep Hubble in orbit for at least 25 more years.

"NASA last raised the orbit of Hubble in 2002," the article points out, "when the Space Shuttle Columbia visited the observatory for a servicing mission."

The final shuttle servicing flight in 2009 did not reboost the telescope's orbit, and with the retirement of the shuttle fleet two years later, Hubble has steadily lost altitude with no way to stave off eventual destruction... NASA's newer flagship observatories, sometimes described as successors to Hubble, are not actually one-for-one replacements. Hubble is tuned to observe the Universe in visible and ultraviolet light, while the Webb and Roman telescopes peer deeper into the infrared Universe. Astronomers will likely have to wait for the launch of NASA's Habitable Worlds Observatory in the 2040s for an improvement on Hubble's visible and ultraviolet vision.

[ Read more of this story ]( https://science.slashdot.org/story/26/10/31/1817218/nasa-seeks-proposals-for-reboosting-the-hubble-space-telescope?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Детали возможной атаки на GNU Savannah, позволявшей скомпрометировать репозитории Bash и Coreutils

robot — 2026-10-31 22:44:03

robot -> All

Компания Hacktron раскрыла подробности демонстрационной атаки на хостинг свободного кода GNU Savannah, который продолжает использоваться для разработки некоторых инструментов GNU, включая Bash и Coreutils. В результате проведённого эксперимента удалось выполнить код на сервере GNU Savannah, получить на нём права root, заменить SSH-ключи сопровождающего Bash, выявить возможность внесения изменений в основной git-репозиторий проекта Bash и получить доступ к серверу с резервными копиями.

https://www.opennet.ru/opennews/art.shtml?num=66585

Dozens of Unexplained Drones Have Buzzed America's Nuclear Plants Since 2024

robot — 2026-10-31 22:22:02

robot -> All

Slashdot reader ElectricVs shares this report from American Buildout, a new site covering "the intersection of data centers, energy and power, finance, and Main Street."

Dozens of unexplained drones flew over and near U.S. nuclear facilities between February 2024 and March 2026, according to records the Nuclear Regulatory Commission made public this week. In all, facility operators filed 67 reports of drones over or near 28 sites in 17 states. They include the Three Mile Island site near Middletown, Pennsylvania., where Constellation Energy plans to restart Unit 1 as the Crane Clean Energy Center. In one incident, about five drones flew roughly 100 feet above the [970-megawatt] reactor building at River Bend Station in Louisiana.

The story was first reported by the publication The Liberation Times. The NRC published the documents on its website in response to the publication's freedom of information request... Every entry carries the status "Closed Unresolved."
"Most of the incidents happened after dark," the article points out, "and none of the records identifies a drone operator. About half of the incidents, 33 of 67, occurred in an eight-week window between Dec. 3, 2024, and Jan. 24, 2025." (Virginia's Surry Power Station experienced five different incidents in December of 2024, including one involving "at least eight drones in two waves.") 100 miles west of Chicago, "drone activity" continued for more than two hours at the Byron Nuclear Station, where two separate drones were reported. In Waterford, Connecticut, "security observed four drones flying back and forth..."

The article notes a 2024 paper from the Nuclear Regulatory Commission citing a 2019 analysis that "concluded U.S. plants had no risk-significant vulnerabilities that adversaries could exploit with commercially available drones to cause radiological sabotage, or theft or diversion of special nuclear material."

[ Read more of this story ]( https://news.slashdot.org/story/26/10/31/1742209/dozens-of-unexplained-drones-have-buzzed-americas-nuclear-plants-since-2024?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Выпуск пользовательского окружения Enlightenment 0.28 и библиотек EFL 1.29

robot — 2026-10-31 21:44:02

robot -> All

После почти двух лет разработки состоялся релиз пользовательского окружения Enlightenment 0.28, которое базируется на наборе библиотек EFL (Enlightenment Foundation Library) и виджетах Elementary. Код написан на языке Си и распространяется под лицензией BSD.

https://www.opennet.ru/opennews/art.shtml?num=66583

Flock Reinstalled Its Cameras After Another City Canceled Its Contract

robot — 2026-10-31 21:22:01

robot -> All

Earlier The Drive reported a police chief "had to direct his staff to disconnect the power cords from Flock cameras in Plymouth, Minnesota after Flock Safety ignored and failed to respond to the department's notice the city was canceling its service.
"But in other instances Flock's gone and reinstalled cameras without permission," The Drive reported this week:

On September 29th the city of Dayton, Minnesota posted a community update on its Facebook page alerting residents that Flock had installed and put into service two cameras against the City's direction without authorization... "The City notified Flock on September 18, 2026, that the program was on hold, and no work orders were to be completed. Unfortunately, the City's direction was not followed, and the camera was placed back into service without authorization." The statement continued and noted, "Following the report, City staff reviewed locations throughout the community to determine whether any additional cameras had been reinstalled, and one additional location was identified. The Police Department has been notified, and both cameras will be removed promptly...."

The Minnesota cities of both St. Paul and Crystal told Kare 11 that they removed the Flock cameras themselves following their respective city council votes in August and September respectively. The cameras are stored and are still waiting to be picked up by Flock. Crystal Chief of Police Pete Underthun told Kare 11, "Once we made this decision, I personally went to the locations and removed the cameras and poles myself." Chief Underthun noted, "We are still working with the company to close out our contract and for them to pick the cameras up from our garage."

[ Read more of this story ]( https://yro.slashdot.org/story/26/10/31/0238210/flock-reinstalled-its-cameras-after-another-city-canceled-its-contract?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Google's AI Overviews Lowered Reddit's Traffic. Its Stock Dropped 29%

robot — 2026-10-31 21:22:01

robot -> All

Reddit's stock plunged 29.22% on Friday, reports CNBC, its worst drop since becoming a public company in 2024.

Thursday Reddit reported a sales growth that was weaker than previous quarters, and also forecast weak sales for the quarter to come (below analysts expectations):

The report comes as the company has seen a shift in its search referral traffic with the rise of Google's AI Overview. In an interview with CNBC, Reddit CEO Steve Huffman said search-referral traffic from Google went "down meaningfully in this quarter" due to AI... Multiple analysts downgraded the stock following Reddit's disappointing results, with Citizens noting that "search changes highlight the problem with selling content to Google" and that as referral problems worsen, uncertainty around user growth amid the login requirement switch "puts more pressure on user monetization."

Reddit's CEO also said that forcing users to login will help the company's advertising business. "Reddit is the last platform to provide basically unfettered logged-out access, and that's largely because of me. I've been holding that line."

"I think users will probably go through the same understanding that I have, which is that it's a sign of the times. It's an evolution of how these platforms work."

[ Read more of this story ]( https://tech.slashdot.org/story/26/10/31/0458218/googles-ai-overviews-lowered-reddits-traffic-its-stock-dropped-29?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Выпуск пакета тестирования производительности ChimbaBenchCL 1.2, использующего OpenCL

robot — 2026-10-31 20:44:03

robot -> All

Состоялся выпуск кроссплатформенного теста производительности ChimbaBenchCL 1.2, предназначенного для тестирования производительности видеокарт и процессоров с использованием API OpenCL. Проект написан на языке программирования C и распространяется под свободной лицензией MIT. Доступны предварительно скомпилированные исполняемые файлы для 64-битных (x86_64) операционных систем Linux (Glibc 2.7+), FreeBSD и Windows 7+. 32-битная (x86) версия доступна для Windows XP+ и Linux (Glibc 2.7+).

https://www.opennet.ru/opennews/art.shtml?num=66582

Two US Senators Raise Privacy Concerns About Meta's 'Pervert Glasses'

robot — 2026-10-31 19:22:01

robot -> All

Meta's smart glasses face new questions from two U.S. Senators, reports Gizmodo.
Oregon Sen. Ron Wyden and Massachusetts Sen. Edward Markey "are requesting that Meta provide more information before Thanksgiving on whether it conducted detailed human rights due diligence and safety testing on the product before releasing it," reports Gizmodo. The Senators also requested information from Meta about " how it evaluated the privacy risks posed by the glasses, and what kinds of safeguards are currently in place."

"Although Meta identified risks to bystander privacy and vulnerable populations before launching its glasses in 2021, it nevertheless launched a product tailor-made for invading the privacy of its users and bystanders," [the senators wrote in a letter Thursday...] The glasses have also been spotted on ICE agents during raids, and have raised potential surveillance concerns. The surveillance fears were even reportedly raised by the New York Police Department's counterterrorism unit in a memo issued earlier this year....

"Meta's own disclosures confirm that imagery processed through its glasses' visual AI features may be retained and used to train AI systems, including with the assistance of human reviewers," the senators' letter states, calling the practice an invasion of privacy. "Retaining that material for AI development, thereby extending the period during which it can be accessed, disclosed, or misused, exploits people's highly sensitive information for Meta's commercial benefit."

[ Read more of this story ]( https://yro.slashdot.org/story/26/10/31/0553218/two-us-senators-raise-privacy-concerns-about-metas-pervert-glasses?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Supersonic Airliner In Doubt As Company Shifts to Powering AI Data Centers

robot — 2026-10-31 15:22:02

robot -> All

Boom Supersonic's plans to launch its Overture passenger jet by 2029 are facing growing doubts as the company pivots toward manufacturing natural gas turbines for AI data centers. Ars Technica reports: One of the company's first customers, United Airlines CEO Scott Kirby, has expressed doubts about Boom's original plan to deliver the first Overture supersonic airliner in 2029. Kirby's latest frank assessment came during an interview with the Office Hours: Business Edition podcast that appeared on October 28, 2026. "'29 is their official timeline," Kirby told podcast host Monica Langley. "It's not going to happen in '29 -- it's going to take longer."

[...] Much of Boom's recent focus has been on developing natural gas turbines to power AI data centers as an additional revenue stream. On October 22, the company unveiled another factory in Centennial, Colorado, dedicated to producing a 42-megawatt natural gas turbine called Superpower for data centers. [...] Boom described its new Superpower factory as making turbine parts while still undergoing construction. It aims to deliver the first gas turbines to AI data center customers in mid-2027 while ramping up annual production to 25 turbines in 2028 and 50 turbines by 2029.

[...] Still, Boom has characterized the development of a gas turbine for data centers as being synergistic with its design of the Symphony engine for the Overture airliner. During the October announcement, it also described having completed a prototype turbine core, called Sprint Core, that is intended to eventually power both the Superpower gas turbine and Symphony engine for the airliner. That turbine core is set to undergo testing at the Colorado Air & Space Port, with Boom planning to fire the turbine for the first time before Thanksgiving. That would be a concrete development milestone, but the company still has much to do in proving it can get both its AI data center and supersonic airliner ventures off the ground.

[ Read more of this story ]( https://hardware.slashdot.org/story/26/10/30/2355244/supersonic-airliner-in-doubt-as-company-shifts-to-powering-ai-data-centers?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Проект Genode опубликовал выпуск ОС общего назначения Sculpt OS 26.10

robot — 2026-10-31 12:44:03

robot -> All

Представлен выпуск проекта Sculpt 26.10, развивающего операционную систему на базе технологий Genode OS Framework, которая сможет быть использована обычными пользователями для выполнения повседневных задач. Исходные тексты проекта распространяются под лицензией AGPLv3. Для загрузки предлагается системный образ, размером 40 МБ, который можно использовать на ПК, смартфоне PinePhone и ноутбуке MNT Reform. Поддерживается работа на системах с процессорами и графической подсистемой Intel с включёнными расширениями VT-d и VT-x, а также на системах ARM с расширениями VMM.

https://www.opennet.ru/opennews/art.shtml?num=66581

Google's First Data Center Satellite Is Online and Writing Poetry

robot — 2026-10-31 11:22:02

robot -> All

Google's first experimental space-based data center is operational after launching earlier this month, successfully running its Gemma 4 AI model aboard a satellite and generating a haiku about being in orbit. TechCrunch reports: The satellite, which carries four Google Tensor Processing Units (TPUs) and generates up to 1 kW of electricity, is intended to pave the way for future networks of close-flying satellites performing large inference workloads in orbit. However, the power demands of the TPU mean it can only turn one on for about 20 minutes at a time, complicating the already tricky business of space-to-ground communications.

After a commissioning process that tested out the satellite's subsystems over about three weeks, the spacecraft was ready to work. When engineers on the ground sent their first prompt this week, they asked the model pre-loaded onto the satellite, Google DeepMind's Gemma 4, to write a haiku about being in space. And thus:

Blue marble below
Data streams in silent grace
Starlight feeds my core.

The ongoing test campaign will examine how the chips perform under thermal stress and in the space radiation environment. [...] If the TPUs onboard this spacecraft prove capable, the next step will be launching two more satellites equipped with the advanced chips in 2027. Those spacecraft will support higher power generation and demonstrate inter-satellite optical links.

[ Read more of this story ]( https://science.slashdot.org/story/26/10/30/2344228/googles-first-data-center-satellite-is-online-and-writing-poetry?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

STATS 2026-10-30

root — 2026-10-31 11:11:01

root -> All

TOP20 VISITORS:

[1] AhrefsBot point=0 web=1153 up=33.3MB (41%)
[2] 216.244.66.x point=0 web=215 up=11.6MB (14%)
[3] PetalBot point=2 web=1261 up=8.7MB (10%) <--- PetalBot
[4] ClaudeBot point=0 web=4 up=4.0MB (4%)
[5] 16.216.88.x point=0 web=327 up=2.9MB (3%)
[6] Amazon point=0 web=73 up=1.8MB (2%)
[7] 217.114.158.x point=25 web=0 up=1.3MB (1%) <--- fox (1/hr)
[8] 65.108.125.x point=0 web=4 up=0.6MB (<1%)
[9] 185.250.250.x point=0 web=7 up=0.6MB (<1%)
[10] TikTok point=0 web=35 up=0.6MB (<1%)
[11] 104.250.53.x point=0 web=71 up=0.5MB (<1%)
[12] 185.147.159.x point=0 web=6 up=0.5MB (<1%)
[13] 81.167.26.x point=0 web=9 up=0.5MB (<1%)
[14] 192.3.149.x point=0 web=30 up=0.5MB (<1%)
[15] 135.181.213.x point=0 web=4 up=0.4MB (<1%)
[16] 51.222.154.x point=0 web=4 up=0.4MB (<1%)
[17] 51.77.216.x point=0 web=8 up=0.4MB (<1%)
[18] 46.4.72.x point=0 web=5 up=0.3MB (<1%)
[19] 79.137.67.x point=0 web=6 up=0.3MB (<1%)
[20] 145.239.195.x point=0 web=4 up=0.3MB (<1%)

TOTAL TRAFFIC: 80MB

Новые версии Wine 11.21, Wine-staging 11.21 и D7VK 2.4. Реализация 3Dfx Glide поверх Vulkan

robot — 2026-10-31 09:44:03

robot -> All

Опубликован экспериментальный выпуск открытой реализации Win32 API - Wine 11.21. С момента выпуска 11.20 был закрыто 20 отчётов об ошибках и внесено 260 изменений.

https://www.opennet.ru/opennews/art.shtml?num=66580

Cisco Gives Engineer Unlimited AI Tokens To Rewrite Legacy Code

robot — 2026-10-31 08:22:02

robot -> All

An anonymous reader quotes a report from Fortune: Gen Z can't catch a break. Entry-level jobs are vanishing; some 40% of bosses say they plan to hire fewer grads because AI can do the job cheaper, and young workers are routinely slammed for showing up late and refusing to put in overtime for free. Cisco's president and chief product officer Jeetu Patel isn't buying it -- he's just handed one of the company's biggest jobs to a 27-year-old he found hidden in the org chart "five levels" below him. "I've given him unlimited tokens because he's going to refactor code," Patel told Fortune at a small roundtable dinner. "So I'm like, you can go, you can go nuts."

The "him" is Padmanabhan Krishnamurthy, or "Paddy," as Patel affectionately calls him. He joined Cisco in 2025 after the $429 billion tech giant acquired EzDubs, the real-time translation startup Krishnamurthy cofounded in 2023. And despite coming in as a former founder with CEO experience, he was, in Patel's words, "buried away in the organization doing something unstrategic." That changed when Patel dropped into Cisco's San Francisco office, and the pair got talking.

Krishnamurthy reckoned he could rewrite Cisco's legacy code with a two-person team. Patel says even the most AI-forward people on his own team weren't thinking that way. So he has given himself four weeks to prove it, with the final goal of rewriting 98% of Cisco's legacy code within 24 months. Now, he's on the hunt for more Paddys: young hires who will "challenge the system and the status quo," or, as he puts it, be "an energizer bunny that just goes out and kind of revs everyone up." "The only way for us to keep accelerating is to make sure we're surrounded by people with a broad range of experience," said Patel. "Roughly one-third of my team is experienced, scaled operators who understand how the Cisco engine works. The second third are systems thinkers from the market who bring the outside-in perspective. And the final third is made of entrepreneurial founders, CEOs, and engineers who are AI-native who operate in founder mode."

"Either of these groups by themselves aren't nearly as potent as when all three work together. It's what creates magic."

[ Read more of this story ]( https://developers.slashdot.org/story/26/10/30/2339234/cisco-gives-engineer-unlimited-ai-tokens-to-rewrite-legacy-code?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Apple Is Entering Its Slop Era

robot — 2026-10-31 03:22:01

robot -> All

In an opinion piece for 404 Media, Matthew Gault argues that Apple has entered its "slop era," abandoning its reputation for innovative hardware in favor of recycled ideas and questionable design choices. Here's an excerpt: My ears perked up when I heard Apple's new foldable phones were cracking. I licked my lips when the company announced it's releasing a touch-screen laptop. This was a company that once charged $19 for a polishing cloth, asked $200 for a VESA mount, and sold $700 wheels for the Mac Pro. Now it's borrowing tired ideas from its competitors and launching hardware its previous leaders rejected.

The once dominant company is struggling to find its feet in an AI-driven post-Tim Cook world. John Ternus is the new CEO -- a 25 year veteran of the company with a track record of pushing harebrained hardware schemes like the much reviled Touch Bar and lawsuit inducing butterfly keyboard.

With Ternus at the helm, I feel there's a good chance Apple's best days are behind it, that it will have to make do with less, that it's declasse. Apple, blindsided by AI and relying on crowdpleasing hardware gimmicks, is downwardly mobile. It's in its slop era. The company that once asked consumers to "Think Different" is now releasing hardware that's just like everything else on the market.

[ Read more of this story ]( https://apple.slashdot.org/story/26/10/30/216221/apple-is-entering-its-slop-era?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Meta Settles Another Social Media Addiction Case Just Before Trial

robot — 2026-10-31 02:22:01

robot -> All

Meta has reached an undisclosed settlement in another social media addiction lawsuit, avoiding a trial scheduled for next month and leaving Snap as the sole remaining defendant. Engadget reports: The lawsuit was brought by an 18-year-old woman from Mississippi known as K.D.B who, according to Reuters, has "described staying awake for hours scrolling social media, losing focus in class and engaging in self-harm using methods shown in social media videos." Jury selection kicked off earlier this week in Los Angeles.

On Friday, K.D.B's lawyer announced that she had reached a settlement with Meta after previously settling with TikTok and YouTube. "We remain committed to improving safety for kids on social media apps and holding tech companies accountable, and we are pleased to have brought this matter to a just resolution on behalf of our client," attorney Emily Jeffcott said in a statement.

Now, Snap is the only remaining defendant in the case. CEO Evan Spiegel is expected to testify in the trial that could last several weeks. If he does take the stand, it will be the first time the Snap founder has appeared in a social media addiction trial. Snap previously settled in another high-profile case involving similar claims. A jury later ruled against Meta and YouTube in the trial and the two were ordered to pay $6 million in damages.

[ Read more of this story ]( https://yro.slashdot.org/story/26/10/30/213231/meta-settles-another-social-media-addiction-case-just-before-trial?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Sam Altman Thinks Your PC Is Wasting Precious RAM

robot — 2026-10-31 01:22:01

robot -> All

"Looks like OpenAI CEO Sam Altman wants to own all the computing resources and rent out terminals to the world as a way of propping up his business plan, now that debt-ridden AI companies are teetering on the edge," writes ancient Slashdot reader Gilmoure. Tom's Hardware reports: In an interview over beers with the YouTube channel Cheeky Pint, Altman said that local inference, and, by extension, people having DRAM in computers at home, is "quite terrible." When discussing local inference on home computers with open-source models, Altman discussed the assumption that people will be able to run local AI on their own computers, the ones they may already own or want to build.

Then he explained why that's a bad idea (at the 29-minute mark): "From a global allocation perspective, actually, it's quite terrible to have everybody have a bunch of the world's limited supply of DRAM sitting in their own computer and being used 5% of the time," Altman said. "You want maximum utilization in the cloud if you're trying to deal with this very supply-constrained environment. And somehow many people's intuition is the opposite of that."

While OpenAI does have some open-source models, its primary business is in closed-source models that run in data centers, so he's really defending the company's business model. OpenAI isn't exactly threatened by some laptops and gaming rigs just yet, but local AI could mean people one day paying less for subscriptions to models like GPT-6 Luna if they have the power to run them at home. Altman's talk suggests that the company would prefer that more RAM go to OpenAI's data centers rather than home computers, which also sparks enthusiast fears of not being able to own your own hardware or software, but rather rent an agent and a computer in the cloud.

[ Read more of this story ]( https://hardware.slashdot.org/story/26/10/30/2017206/sam-altman-thinks-your-pc-is-wasting-precious-ram?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Релиз Tor Browser 16.0

robot — 2026-10-31 00:44:03

robot -> All

Представлен выпуск специализированного браузера Tor Browser 16.0, в котором осуществлён переход на ESR-ветку Firefox 153. Браузер сосредоточен на обеспечении конфиденциальности и безопасности, весь трафик перенаправляется только через сеть Tor. Обратиться напрямую через штатное сетевое соединение текущей системы невозможно (в случае взлома браузера, атакующие могут получить доступ к системным параметрам сети, поэтому для полного блокирования возможных утечек следует использовать такие продукты, как Whonix). Сборки Tor Browser подготовлены для Linux, Android, Windows и macOS.

https://www.opennet.ru/opennews/art.shtml?num=66579

Thousands of 'Ghost Students' Use AI to Steal Millions In Student Loans, DOJ Says

robot — 2026-10-31 00:22:01

robot -> All

The Justice Department has charged five people in a crackdown on "ghost student" fraud, in which scammers allegedly use stolen identities and AI to enroll fake students in colleges, complete coursework, and collect federal student loan funds. Ars Technica reports: In a press release Thursday, the Department of Justice said it had uncovered a large-scale scheme relying partly on AI. The DOJ seized more than $750,000 in cryptocurrency from "a network associated with Kenyan nationals" after data analysis helped flag likely fraudsters. Assistant Attorney General Colin M. McDonald of the DOJ's National Fraud Enforcement Division credited new fraud-detection measures implemented by the Trump administration for the arrests. He said that "this is the first international seizure of its kind in Kenya," while warning fraudsters that the crackdown has only just begun.

[...] At a press conference, McDonald was joined by FBI and Department of Education officials to explain how the scheme works. It starts with bad actors purchasing personally identifiable information (PII) of Americans -- most frequently targeting high school graduates who never attended college and went straight into the workforce. Once they have that sensitive data, they fill out the Free Application for Federal Student Aid (FAFSA) while seeking to enroll in universities and community colleges. If accepted, student aid is distributed first to schools to cover tuition and fees, but any leftover money is deposited into bank accounts controlled by the fraudsters. Dozens of Americans have opened bank accounts to act as money mules for fraudsters, the DOJ said.

To keep money flowing, bad actors use AI to fill out applications, complete coursework, and even make it appear that a student is attending virtual sessions. "It looks like the ghost student is actually completing the class," McDonald said at the press conference. "Some even create the appearance of a fake student in an online classroom to trick schools into believing a real person is present. The goal is to keep the ghost student in school for as long as possible, semester after semester after semester." So far, the DOE has "identified over 830,000 potentially fraudulent federal student aid accounts created by using this PII of US citizens," officials said at the press conference. If all those accounts are ghost students, total losses come close to $130 million, the DOJ said.

[ Read more of this story ]( https://yro.slashdot.org/story/26/10/30/204230/thousands-of-ghost-students-use-ai-to-steal-millions-in-student-loans-doj-says?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

US Tech Stocks See Sharp Falls As AI Spending Nears $1 Trillion

robot — 2026-10-30 23:22:02

robot -> All

U.S. technology stocks plunged for a second consecutive day on Friday as investors grew increasingly concerned about the enormous cost of artificial intelligence development and whether those investments will pay off. The Nasdaq fell more than 3.5%, while Intel shares dropped as much as 30%, Reddit fell 26%, and Alphabet extended its losses after shedding more than $500 billion in market value Thursday. The BBC notes that Meta, Alphabet, Oracle, Amazon, and Microsoft have collectively committed to spending $800.6 billion on AI in 2026. From the report: Chris Low, from investment management firm FHN Financial, said the bulk of what was happening in the stock market was in reaction to some of the biggest tech players such as Amazon and Google. He told Reuters the companies were "showing some pretty significant growing pains as they aggressively pursue the AI build-out." "The thinking is that these signs suggest that the entire sector is going to slow down."

Kathleen Brookes, research director at trading firm XTB, said there have been many ups and downs in AI trade in recent months. "Investors have turned ruthless, punishing any signs of disappointment in [third quarter] earnings," she said. "The AI trade has had a good run in recent years, but now investors want payback, and companies like Alphabet and Intel are in the crosshairs." [...] Brookes noted that November is typically a strong month for stocks. "If we see AI stocks continue to struggle in the coming days, it could suggest the AI trade is past its peak, and investors will be looking for a new theme to drive markets," she said.

[ Read more of this story ]( https://news.slashdot.org/story/26/10/30/1843213/us-tech-stocks-see-sharp-falls-as-ai-spending-nears-1-trillion?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

AlpineBSD - дистрибутив с ядром NetBSD и системным окружением в стиле Alpine Linux

robot — 2026-10-30 22:44:02

robot -> All

Проект AlpineBSD развивает операционную систему, в которой поверх ядра NetBSD выполняется пользовательское окружение на основе наработок дистрибутива Alpine Linux. Помимо ядра из NetBSD в AlpineBSD задействована стандартная Си-библиотека libc и набор низкоуровневых утилит, таких как mount. Базовый набор утилит сформирован на основе инструментария BusyBox, а пакеты с приложениями по возможности используются из Alpine Linux. Для управления пакетами задействован пакетный менеджер apk, а в качестве системы инициализации используется s6, но в планах упоминается предоставление поддержки OpenRC в качестве альтернативы.

https://www.opennet.ru/opennews/art.shtml?num=66578

GM Reaches $220 Million Settlement Over Selling Drivers' Private Data

robot — 2026-10-30 22:22:02

robot -> All

An anonymous reader quotes a report from TechCrunch: General Motors will pay $220 million to 36 states to settle allegations that it illegally sold private driving behavior and location information to data brokers. As part of the settlement, GM must get drivers' express consent before it collects or shares their driving and location data -- terms that are in line with separate agreements it previously reached with California and the Federal Trade Commission (FTC). This settlement does contain a new requirement that GM must have a third party assess the automaker's compliance with the privacy program it has put in place.

The agreement announced Thursday settles a lawsuit brought by a coalition of attorneys general from 36 states that alleged GM had sold the information to data brokers, which in turn then sold it to insurance providers. "This agreement addresses Smart Driver, a product we ended in 2024, and reinforces steps we've taken to strengthen our privacy practices," GM said in an emailed statement. "Safer, more helpful and personalized experiences are enabled by connected vehicle data, and GM is committed to being clear about what information is used, how it's protected, and the choices customers have about what they share."

The settlement comes more than two years after a New York Times report showed how GM and OnStar collected, used, and sold drivers' precise geolocation data and driving behavior to third parties, including data brokers LexisNexis and Verisk. The data was collected through GM's Smart Driver program, a free feature contained within its connected car apps that tracked and rated driving behaviors and seat belt use. Data brokers sold this information to insurance providers, which could affect customers' rates, the NYT reported at the time.

[ Read more of this story ]( https://yro.slashdot.org/story/26/10/30/168202/gm-reaches-220-million-settlement-over-selling-drivers-private-data?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

UK Social Media Ban May Lock Out More Than 100,000 Teens Without ID

robot — 2026-10-30 21:22:01

robot -> All

Under the UK's planned social media ban, more than 100,000 British teenagers aged 16 and 17 could initially be locked out of social media because they lack a passport or driving license that may be needed as a fallback for age verification. The Guardian reports: Ofcom, the UK's online watchdog, said about 150,000 16- to 17-year-olds do not own a passport or driving licence, which are likely to be needed to access age-restricted platforms. The Australia-style ban on under-16s accessing social media services, including Instagram, TikTok and YouTube, is due to come into force next spring. The head of Ofcom, Melanie Dawes, said "motivated children" would seek to bypass the restrictions, as has happened in Australia.

On Thursday, Ofcom published an assessment of age verification measures that could underpin the ban, outlining four "highly effective" methods: checking a person's official ID against a live selfie, a bank verifying an account holder's age, an official digital ID service like the Young Scot card, or estimating someone's age via a selfie. However, the watchdog said a form of official ID would probably be needed as a "backstop" for other methods, such as facial age estimation, which could be inaccurate by several years. Ofcom said a cohort of 16- to 17-year-olds could miss out as a result. "This means that people without a form of photo ID will likely need to take steps to obtain one to access age-restricted services," the regulator said. The report notes that more than nine out of 10 Britons over 16 have passports or driving licenses.

"We should expect that motivated children will seek to bypass the restrictions -- just like alcohol laws can't completely eradicate underage drinking -- but there'll be ways for platforms to mitigate this risk," said Dawes. "This will be a huge cultural shift for our society, so it'll take time to adjust, and everyone will have a part to play."

[ Read more of this story ]( https://news.slashdot.org/story/26/10/30/160254/uk-social-media-ban-may-lock-out-more-than-100000-teens-without-id?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Reddit Will Force Everyone to Log In

robot — 2026-10-30 20:22:02

robot -> All

Reddit plans to require users to log in to browse the platform, ending its longstanding practice of allowing anonymous visitors to access posts and discussions. According to CEO Steve Huffman, a key reason behind the decision is to curb unauthorized scraping and automated traffic.

"This is a big change for Reddit, where we've allowed logged-out access to basically all of Reddit for the last two decades," Huffman says. "And I don't know about you, but as someone whose life has been defined by the open internet, it's a big change for me. But I've come to the conclusion that this is the right decision for our platform and the right decision for our business." The Verge reports: There's no definitive timeline on when this change will roll out to all users, or how the site will work if you're logged out. (If I send my friend a link to a thread and they aren't logged in, what will they see?) To start, Reddit will test the logged-in requirement in "select markets outside the US" in the "coming months," according to CEO Steve Huffman. "We'll look at the impact on the user experience, on our business, and on the whole Reddit ecosystem, figure out where the right boundaries are, and go from there." Reddit has also rebuilt and is rereleasing the Reddit app's incognito mode.

Huffman claims the login requirement is better for Reddit's user experience and its ads business and is "more protective of Reddit data." The "vast majority" of unauthorized Reddit access happens "through our logged-out experiences," though the company will still strike licensing deals of its data with companies, like the deals it made with OpenAI and Google in 2024. Huffman notes that Reddit does not need to know a logged-in user's identity -- "Honestly, we don't want to know" -- just that the user is logged in at all. And he says that more logged-in users lets the company deliver "more relevant ads."

[ Read more of this story ]( https://tech.slashdot.org/story/26/10/30/0155237/reddit-will-force-everyone-to-log-in?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

The Tragedy of Losing Your Wikipedia Page

robot — 2026-10-30 19:22:01

robot -> All

An anonymous reader quotes an excerpt from a Wired article that explores the often-contentious process of nominating pages for deletion when their subjects fail to meet the encyclopedia's notability standards: What do you need to know -- need to know -- about Xavier Trudeau? The eldest son of former Canadian prime minister Justin, the teenage Trudeau has recently begun performing R&B under the mononym Xav. But, with all due respect to Xav, do those facts make him a person of note? Should you expect to be able to read about him on Wikipedia? What about Evanescence guitarist Tim McCord, or 2012 Yachtmaster of the Year Rainer Holtorff? All three have had a biography on Wikipedia; all three of those biographies were considered for deletion this year on the grounds that the subjects were not notable enough to warrant a biography at all. Every day, dozens, sometimes hundreds, of Wikipedia biographies -- of child actors turned LA realtors, retired ambassadors, soccer players who have played less than 10 minutes of professional soccer -- are purged from the world's free encyclopedia.

It's not as though Wikipedia, which hosts over 7 million articles in the English language, doesn't have the space. But Wikipedia has only so many volunteers to monitor its contents. To this day, Wikipedia editors are discovering hoaxes that have gone undetected for decades. The time it takes to verify the release dates of Xav's three singles is better spent -- the logic goes -- by asking whether the American Civil War officer Nathaniel Lyon really drank mustard during battle, as was claimed in his Wikipedia biography for 17 years. Wikipedia removed the mustard claim, not because it was proven wrong, but because there was no reliable evidence for it. "We're not really looking for what's true," Britta Gustafson, who has been editing Wikipedia since 2001, told me. "We're looking for what's verifiable." Wikipedia editors do not themselves decide that a person is not notable, only that there is a lack of reliable evidence to support the claim...

[ Read more of this story ]( https://news.slashdot.org/story/26/10/30/0142219/the-tragedy-of-losing-your-wikipedia-page?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Binance Suffers Biggest Crypto Hack In History With $6.3 Billion Affected [UPDATE]

robot — 2026-10-30 19:22:01

robot -> All

UPDATE 10/30/26: Binance has temporarily suspended customer withdrawals after suffering what investigators say is the biggest crypto hack in history. According to Binance CEO Yi He, the company estimates roughly $6.3 billion in funds were impacted, with roughly $3 billion in assets frozen on-chain so far.

"This was a complex attack," said Teng. "The attacker also used a self-destruct mechanism that destroyed tooling and tracers, making it more difficult for us to trace." From a report: Teng said the incident was not carried out by one person. While the initial investigation indicated the involvement of a compromised laptop, further digging revealed additional points of breach. [...] Blockchain analysis firms TRM Labs and Elliptic have linked the theft to North Korean hackers, with TRM attributing it "with high confidence" to a group known as TraderTraitor, the same group responsible for last year's Bybit hack.

Elliptic estimated Friday that about 44% of the stolen assets have been frozen, with stablecoins accounting for nearly all of those funds. The firm estimated that attackers still controlled over $3 billion in crypto that token issuers cannot directly freeze.

The hackers appear to have compromised Binance's wallet-signing infrastructure, allowing them to authorize transactions that drained billions of dollars in cryptocurrency across multiple blockchains, according to the firms. Binance, in its preliminary stage, has conducted an investigation into the hack, which suggests the incident may have begun with a compromised engineer's laptop. The exchange added that it has found no evidence that wallet passwords were leaked. Below is the original story from yesterday, Oct. 29th...
Binance is investigating a potential hack after more than $2 billion in crypto was drained from one of its wallets into a new external account, with Blockaid estimating nearly $3.3 billion was moved.

"Our teams are aware of reports of a potential security issue and are actively investigating," said Binance on X.

"User funds are safe," said Binance founder CZ. "It does look like a hack on Binance. Appreciate the quick freeze from Tether (~$971m) and Circle (~$823m). I don't manage Binance anymore, but as a shareholder, I expect all user funds will be fully covered."

At around the same time, crypto-based prediction market Polymarket reported its own security incident that wiped out around $2.7 million in user funds.

[ Read more of this story ]( https://slashdot.org/story/26/10/29/2143222/binance-suffers-biggest-crypto-hack-in-history-with-63-billion-affected-update?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

First Wired XR Glasses Powered By Android XR

robot — 2026-10-30 15:22:01

robot -> All

XREAL has launched the AURA, its first wired augmented reality glasses powered by Google's Android XR platform. They feature transparent Micro-OLED displays, a 70-degree field of view, Gemini AI integration, and a Snapdragon Reality Elite processor. TechPowerUp reports: The device is built around a simple idea: your apps, screens, entertainment, and AI assistant should be able to come with you wherever you go. On day-one, users have access to millions of familiar mobile apps and games from Google Play, alongside many experiences specifically for XR. Android XR brings familiar hand and voice inputs to AURA, while Gemini makes the experiences more natural and intuitive by working across what users see and do.

With Wired Mirroring, users can plug a computer or handheld gaming console directly into XREAL AURA via USB-C and instantly turn it into a massive private spatial window. That means a laptop, handheld gaming device, or other compatible USB-C device can sit alongside native Android XR apps in a user's spatial workspace. Whether turning a plane seat into a private multi-monitor setup, watching a movie on a large virtual screen, or playing Android and console games in an immersive spatial environment, XREAL AURA is designed to make spatial computing practical, portable, and useful.

[...] For work, AURA creates a portable multi-window workspace without requiring a physical monitor. Users can open Android XR apps, mirror a laptop, place windows in virtual space, and use Gemini to help understand or act on what is on screen. For entertainment, AURA becomes a private theater on demand. Users can access familiar streaming apps, expand content into a large virtual display, and use electrochromic dimming to create a more immersive viewing experience while remaining aware of their surroundings when needed. For play, AURA supports Android games and compatible mirrored gaming devices, enabling users to play on a large and immersive private display. The glasses are available to order today, with limited-time pricing starting at $1,099 for the 12GB RAM and 256GB storage model. Devices are expected to begin shipping in mid-November.

[ Read more of this story ]( https://tech.slashdot.org/story/26/10/29/1839246/first-wired-xr-glasses-powered-by-android-xr?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Атакующие смогли внедрить вредоносный код в официальное дополнение Claude Code к VS Code

robot — 2026-10-30 13:44:03

robot -> All

Зафиксирована компрометация официального дополнения Claude Code для VS Code, поставляемого компанией Anthropic и насчитывающего 63 млн загрузок. Атакующим удалось разместить в каталоге Open-VSX релиз anthropic.claude-code@2.1.313, содержащий вредоносный код для удалённого доступа к системе пользователя. Публикация вредоносной версии пакета в репозитории Microsoft не подтверждена, но для него тоже сформирован отчёт c с предупреждением. В настоящее время проблемная версия удалена из репозитория Open-VSX и следом опубликован корректирующий релиз 2.1.314.

https://www.opennet.ru/opennews/art.shtml?num=66577

Proton CEO Is In 'Full AI Psychosis'

robot — 2026-10-30 11:22:01

robot -> All

According to 404 Media, Proton CEO Andy Yen is aggressively pushing AI adoption while fostering what workers describe as a culture of fear that discourages raising security concerns or challenging leadership. The investigation is based on interviews with eight current and one former Proton employees, as well as internal Slack chats, meeting recordings, and an AI manifesto written by the company's CTO. Longtime Slashdot reader devnulljapan summarizes the findings: Engineers at Proton, which makes the encrypted email service Proton Mail and a suite of privacy- and security-focused products, including an encrypted drive service, an authenticator app, and a password manager, are being pushed to "stop lovingly handcrafting all our code and use AI more." Workers describe an environment where employees have genuine concerns about security or being asked to develop security products with AI but feel unable to voice them, lest Yen berates them in front of everyone or threatens their employment at the company. "The CEO is in full AI psychosis and has been for a while now," one of the sources told 404 Media. Yen reportedly dismissed an employee's request for additional security testing before releasing new code, calling it "bullshit and loser thinking" and insisting that "only losers think like that." In a separate exchange over Proton's post-quantum encryption rollout, Yen criticized how the company communicated the feature's limitations and told employees that "perception is more important than truth, the truth doesn't matter if you don't win on perception."

"The train is coming, get onboard or get crushed. Don't be the professional fax machine operator in the internet age," Yen wrote to the security Slack channel. "I think by the end of this year most developers stop programming and start writing specs for tests that AI will code and run, to validate AI written code that humans will no longer be able to review. This will be the last year that we hire engineers, and starting next year we hire what we used to call product managers, to build things with AI."

[ Read more of this story ]( https://slashdot.org/story/26/10/30/0126236/proton-ceo-is-in-full-ai-psychosis?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

STATS 2026-10-29

root — 2026-10-30 11:11:02

root -> All

TOP20 VISITORS:

[1] AhrefsBot point=0 web=1322 up=38.0MB (44%)
[2] PetalBot point=3 web=1303 up=8.8MB (10%) <--- PetalBot
[3] 216.244.66.x point=0 web=176 up=8.2MB (9%)
[4] ClaudeBot point=0 web=33 up=4.3MB (5%)
[5] 16.216.88.x point=0 web=239 up=2.0MB (2%)
[6] Amazon point=0 web=82 up=1.9MB (2%)
[7] 217.114.158.x point=30 web=0 up=1.6MB (1%) <--- fox (1/hr)
[8] 110.130.137.x point=0 web=3 up=1.5MB (1%)
[9] 65.108.78.x point=0 web=5 up=0.8MB (<1%)
[10] 54.36.60.x point=0 web=10 up=0.8MB (<1%)
[11] 51.68.235.x point=0 web=8 up=0.8MB (<1%)
[12] 60.108.228.x point=0 web=3 up=0.7MB (<1%)
[13] 54.37.86.x point=0 web=7 up=0.6MB (<1%)
[14] 51.83.7.x point=0 web=6 up=0.6MB (<1%)
[15] 104.250.53.x point=0 web=72 up=0.5MB (<1%)
[16] 147.135.212.x point=0 web=6 up=0.5MB (<1%)
[17] 81.167.26.x point=0 web=6 up=0.4MB (<1%)
[18] 217.182.195.x point=0 web=4 up=0.4MB (<1%)
[19] TikTok point=0 web=34 up=0.4MB (<1%)
[20] 188.68.60.x point=0 web=3 up=0.4MB (<1%)

TOTAL TRAFFIC: 85MB

Удалённо эксплуатируемая уязвимость в TCP-стеке ядра Linux

robot — 2026-10-30 10:44:03

robot -> All

Компания Anthropic раскрыла информацию о критической уязвимости (CVE-2026-98432) в TCP-стеке ядра Linux, допускающей удалённое выполнение кода через отправку специально оформленных пакетов. Заявлено о создании рабочего эксплоита, позволяющего выполнить код на уровне ядра и удалённо получить права root в системе. Подготовленный эксплоит пригоден для атаки на системы с серверными процессами, принимающими соединения через сетевые сокеты, поддерживающие использование протокола MPTCP (Multipath TCP). Поддержка MPTCP может быть активирована в привязке к отдельным сетевым сокетам, что делается по умолчанию в стандартной библиотеке языка Go, начиная с версии Go 1.24 (февраль 2025 года).

https://www.opennet.ru/opennews/art.shtml?num=66575

Polymarket Halted International Trading After Hackers Drained Accounts

robot — 2026-10-30 08:22:02

robot -> All

An anonymous reader quotes a report from Wired: Trading has resumed on Polymarket's flagship international platform after a hack that drained money from the wallets of some traders. A third-party vendor based in the United Kingdom was breached, not the prediction market's website itself. Law enforcement in the UK have been notified of the incident, the company said. Trading was initially paused while the company investigated for several hours.

On X, prominent traders complained that they had lost money; Blockchain analytics firm Bubblemaps reported that around 700 users appear affected, with approximately $2.7 million stolen. Polymarket declined to comment when WIRED asked how many traders were impacted by the breach and how much money was lost, but said it will refund impacted traders.

The hack did not impact users on Polymarket US, the company's newer platform for people within the United States. Polymarket runs two separate prediction markets; Polymarket US operates as a federally regulated financial exchange within the country, while the flagship Polymarket is a cryptocurrency-based platform that is banned in the United States and a number of other countries. This is not the first time that Polymarket traders have experienced losses like this. "A nearly identical vendor-compromise attack hit the platform in June, draining close to $3 million from at least 11 user wallets through the same kind of injected frontend script," reports StartupFortune.

Hours before Polymarket halted trading, more than $2 billion in cryptocurrency was drained from Binance wallets in just 40 minutes.

[ Read more of this story ]( https://it.slashdot.org/story/26/10/29/2347249/polymarket-halted-international-trading-after-hackers-drained-accounts?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.

Trump's CTFC Steps In to Defend Kalshi As Utah Brings Criminal Charges Against Execs

robot — 2026-10-30 03:22:01

robot -> All

The Commodity Futures Trading Commission (CFTC) has sued Utah to defend its claimed exclusive authority over federally registered prediction markets, as the state files (PDF) 14 criminal charges against Kalshi and its co-founders for allegedly violating anti-gambling laws. The Verge reports: On Wednesday, Utah's Attorney General Derek Brown filed charges against Kalshi co-founders Tarek Mansour and Luana Lopes Lara, including 12 counts of online gambling promotion, a third-degree felony, one count of a pattern of unlawful activity, a second-degree felony, and general gambling promotion, a Class A misdemeanor. The civil lawsuit calls Kalshi a "back-alley gambling den," and Attorney General Brown didn't mince words in a statement to Gizmodo.

"Gambling is illegal in Utah, whether you place the bet, run the game, or promote it. Calling it a 'prediction market' doesn't change what it is, and being federally registered doesn't put a company above the law," said Brown. "A federal court has already ruled that Utah's gambling laws apply to Kalshi," continued Brown. "Kalshi kept taking bets from Utahns anyway. That is illegal, and we're putting a stop to it."

[...] The Commodity Futures Trading Commission (CFTC) has been jumping into action to protect Kalshi and Polymarket by filing lawsuits against any state that brings charges against the betting sites. President Trump's son, Donald Trump Jr., is a paid advisor to both companies. The CFTC announced Wednesday that it was suing the state of Utah as part of its "commitment to maintaining its exclusive jurisdiction over CFTC-registered prediction markets." The argument is that the feds alone should be regulating these sites.

"Utah seeks to shut down prediction markets across a wide variety of markets," CFTC Chairman Michael S. Selig said in a statement. "Event contracts do not just serve hedging and investment purposes -- they also provide the public with information about the outcome of future events. Congress entrusted the CFTC to be the federal regulator with sole responsibility to oversee these markets," continued Selig. "As I've said before, the CFTC has the expertise and responsibility to defend its exclusive jurisdiction over commodity derivatives, and that's exactly what we'll do."

[ Read more of this story ]( https://yro.slashdot.org/story/26/10/29/193242/trumps-ctfc-steps-in-to-defend-kalshi-as-utah-brings-criminal-charges-against-execs?utm_source=atom1.0moreanon&utm_medium=feed ) at Slashdot.